Fly Away 1 - NahamconCTF 2024

NahamCon CTF 2024

Lenny Kravitz lovers, this new app cleverly named “Fly Away!” can give you random lines from one of his most popular songs. Can you figure out how the songs are being sent to the app?

Writeup

Upload the apk to virus total, go to behavior tab and extend the HTTP Request dropdown in the Network Communication section

Flag is obtained after performing a curl request to the following url and requests headers.

curl -X GET -H "Authorization: Bearer 7423509e-6de0-4b86-8398-1d5b42e5b62e"  -A "Dart/3.4 (dart:io)" http://challenge.nahamcon.com:31253/random-lyric